Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

unbound

NLnet Labs Unbound versions 1.16.2 through 1.25.1 contain a vulnerability related to 'ghost domain names' attacks. This flaw allows an attacker controlling a ghost zone to extend the caching window of expired parent-side glue records by up to one TTL value. When the 'harden-referral-path' option is enabled, Unbound performs implicit queries that can trigger this behavior without client queries. This vulnerability is a variant of CVE-2026-40622 but affects A/AAAA glue records instead of NS queries. The CVSS score is 3.7, indicating medium severity.

The vulnerability in NLnet Labs Unbound from version 1.16.2 up to and including 1.25.1 is a variant of the 'ghost domain names' attack family, similar to CVE-2026-40622. It allows an adversary who controls a ghost zone and can query a vulnerable Unbound resolver to extend the ghost domain window by up to one cached TTL value for A/AAAA glue records. This is achieved by causing Unbound to overwrite the cached expired parent-side glue rrset. In configurations where 'harden-referral-path' is enabled, Unbound implicitly performs the query, removing the need for a client query to trigger the issue. This vulnerability does not affect confidentiality or availability but can impact cache integrity.

NLnet Labs Unbound versions 1.16.2 through 1.25.1 contain a vulnerability related to 'ghost domain names' attacks. This flaw allows an attacker controlling a ghost zone to extend the caching window of expired parent-side glue records by up to one TTL value. When the 'harden-referral-path' option is 

In NLnet Labs Unbound 1.16.2 up to and including 1.25.1, a similar vulnerability as with CVE-2026-40622 in the 'ghost domain names' family of… (CVE-2026-42955)

Threats Tagged 'ubuntu-cve-2026-42955'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'ubuntu-cve-2026-42955'

Lead Pen Test Professional